HNHacker News
TopNewBestAskShowJobs

secfirstmd

5,929 karma · joined October 16, 2013

Building and managing security and incident response teams. Rory at Secfirst Dot Org.
submissionscomments
secfirstmd··on Self-Hosting Dozens of Web Applications and Services on a Single Server
I used to be a Sandstorm user but yes it was abandoned. Have been a Cloudron guy since the start and have been very happy with it.
secfirstmd··on The absurdity of renting a car will no longer be tolerated
Insurance costs in Ireland are much higher than the UK.
secfirstmd··on Desmond Tutu, anti-apartheid icon, dies at 90
There's a certain irony that many people who celebrate the life of Desmond Tutu and his fight against apartheid continue to ignore that he said Israel does the same thing and should be subject to boycott.

https://www.theguardian.com/world/2002/apr/29/comment

secfirstmd··on American spy hacked Booking.com, company stayed silent
Not only that. In places like Thailand it is a key part of anti human traffic and child sex abuse strategy. Because it is so common, staff in most hotels are trained to spot it.
secfirstmd··on HashiCorp – S1
I took an offer elsewhere. Twitter would have been fun as Mudge was invoked with that team.
secfirstmd··on Ford's $3900 electric crate motor and F-100 concept
Do you also turn off your phone?
secfirstmd··on HashiCorp – S1
My Twitter experience:

Applied, rejected within a day, got an email from a hiring manager four weeks later asking me to re-apply, very sorry etc etc, bad screener he had to look over everything again.

I re-apply, two interviews, asked to do a presentation and then a video on strategic threats to the org, spent two days of my holiday doing it (tight schedule from Twitter), sent, no reply for two weeks, get an email back saying they wanted it to be more tactical.

I pointed out what they said (it needs to be strategic), they come back two weeks later, very sorry etc, they would love to move me to next stage, one week later hiring manager doesn't turn up for interview, two days later apologises, asks me to meet with his senior manager in two weeks. I agree.

Recruiter then turns around and says, sorry not what they are looking for. No other explanation. Next day emails me asking would I apply for another position. I say, "Hmmm not so sure. Perhaps. What's the comp?" He says "Great, I think you will fit well. I will go check it." Then ghosted...

Was a cool role. But still. I'm in a position were I am also interviewing the people on the other side of the table. I'd love to have helped build something they needed about that fusion and analysis.

But sorry, in that context, just not good enough. That's my first dealing with your company. Why should I trust anything else will be better?

secfirstmd··on Meta: A Social Technology Company
Metasploit. Metadata.
secfirstmd··on reMarkable Connect subscription plans
Yeh I was a big fan and waited over a year for the original. Its main drawback has always been it's crappy sync with Dropbox etc. 100 dollars are year for that? Get last time I buy a Remarkable...
secfirstmd··on Unmanned submarine earmarked for Irish Sea freight crossings
I'm curious. What sort of mysterious things have you run into? Narco stuff? Military? Little Green Men?
secfirstmd··on After six months on Mars, NASA's tiny copter is still flying high
Well it's been nearly 11 months in Martian time... :)
secfirstmd··on Windows Sysinternals: advanced system utilities and technical information
A proper Sysinternals equivalent set of tools is sorely missed on macOS. Trying to do DFIR on them mostly sucks compared to whats available on Windows. (Open to hearing anyone who has particular favorites or recommendations)
secfirstmd··on Amazon Shuts Down NSO Group Infrastructure
Also great opportunities for backdoor access...
secfirstmd··on Classified Challenger tank specs leaked online for videogame
Can confirm.

I worked in Westminster for a bit. That and "The Thick of It" were actually more realistic than many staged managed and PR airbrushed documentaries I have seen.

secfirstmd··on Ask HN: How to get started with CB radio?
Would a satellite phone not be a bit more useful?
secfirstmd··on Up to 1,500 businesses affected by ransomware attack, Kaseya CEO says
The NSA has actually lost some of its tools (Shadowbrokers) and backdoors (Juniper Networks)
secfirstmd··on Leaving Google
Which companies are examples of this? I know Gitlab is remote but changes based on location and ends up not being that good in somewhere like Dublin
secfirstmd··on The stock market speaks: How Dr. Alchian learned to build the bomb (2014)
I've always felt the F-35 would be the perfect program is hide away a few extra black projects. Obviously their is a known black budget but let's be honest, that's not everything.
secfirstmd··on The stock market speaks: How Dr. Alchian learned to build the bomb (2014)
Woah IBM would be perfect for this kind of thing... :)
secfirstmd··on Barclays stops UK clients from sending funds to Binance
Barclays once blocked all of my company accounts for a week but never told me. Eventually I found out when stuff bounced. When I rang up to find out why they (no joking) asked me to explain why I had transactions from something called "Federal Reserve" (it was part of a US government contract).

I explained why. Then they asked me to explain who this "Federal Reserve" was. I laughed thinking they were joking...Then found myself having to actually explain it. They then had me on hold for ten minutes when they checked with their manager...

secfirstmd··on World’s largest ever four day week trial in Iceland ‘overwhelming success’
Ironically the military is one of the worse places for usage and wastage of time.

There is tons of accountability for some stuff ("How much diesel did you put in that jeep?") but very little for people's time ("Let's have 300 infantry here an hour earlier than necessary before an event, even though it costs X per hour per person for them to be standing around doing nothing.)

It's also the same around some safety stuff ("Everyone wear a reflective belt going on a run") vs time base safety stuff ("That platoon has just been on exercise and barely slept for 72 hours and everyone is now driving home.")

Don't get me started on the overall wastage the military spends on talent management. Doing an extremely expensive and complex course that takes a year+ to complete? Cool, you might often be actually fullfilling that role for one/two years max afterwards before your moved on to next role doing something different elsewhere.

secfirstmd··on U.S. Navy Laser Creates Plasma ‘UFOs’
Watch "Phenomenon". Many countries have experienced similar issues. Soviet Union was very worried about UFO reports near its nuclear sites. Also the NYT story about the F18s didn't really go into much detail but Mexico also had similar experiences.
secfirstmd··on Will we ever fly supersonically over land?
If I recall correctly. The recent examples of Typhoons going super sonic over London were QRA aircraft hammering it down the country to pick up suspicious aircraft. In some of those cases they are allowed do it
secfirstmd··on Secret Recordings Reveal How Exxon Lobbyists Manipulate Politicians and Public
I highly recommend people interested in this topic read up on Dark Basin and some of the shady stuff Exxon gets up to against environmental groups.

https://citizenlab.ca/2020/06/dark-basin-uncovering-a-massiv...

"Israeli charged in global hacker-for-hire scheme wants plea deal -court filing" https://www.reuters.com/technology/israeli-charged-global-ha...

It's not just Exxon of course, I've worked on a number of similar cases were huge money was run through lawyers, corporate intelligence firms etc to manipulate and target environmental and human rights groups. My sense is that this is only really the beginning of a huge amount more of this shady practice in the industry being exposed.

secfirstmd··on EU startup fund overwhelmed by high demand
Agreed. Have applied for EU projects before and it's a costly mess.
secfirstmd··on Classified Ministry of Defence documents found at bus stop
Depends on how it was acquired. USB more traceable in some ways.
secfirstmd··on Classified Ministry of Defence documents found at bus stop
That's what I had thought alright. UK Eyes Only documents being printer, leaving a building and being left somewhere. Just sounds so odd.
secfirstmd··on AWS acquires Wickr
What's wrong with Signal or Matrix/Element?
secfirstmd··on Ask HN: Technical Summer Reading List
-Applied Incident Response

-Incident response in the age of cloud

-Warning Intelligence Handbook

secfirstmd··on Stress does turn hair gray, and it’s reversible
Haha, yes. It has certainly been challenging but for the most part totally worth it.
← PreviousPage 3 of 34Next →